RE: Spade/Spice and Snort?

[Mark.Schutzmann () Omron com]

Michael,

Thanks for that. In fact, I have learned about Spade from SiliconDefense.
Since this is a user group, I am actually asking for experiential comments.
In knowing that Spade works on statistical anomolies, I am wondering if
people are finding this to be as useful as it sounds, or whether it is just
another tool to sort out FPs and whether it just adds overhead to Snort.

Thanks,
Mark


                                                                                                                        
                          
                      "Michael Steele"                                                                                  
                          
                      <michaels () winsnort com>             To:       <snort-users () lists sourceforge net>           
                                
                      Sent by:                            cc:                                                           
                          
                      snort-users-admin () lists sour        Subject:  RE: [Snort-users] Spade/Spice and Snort?         
                             
                      ceforge.net                                                                                       
                          
                                                                                                                        
                          
                                                                                                                        
                          
                      11/01/2003 04:20 PM                                                                               
                          
                                                                                                                        
                          
                                                                                                                        
                          




You need to go and read what Spade is.

Go to www.silicondefendse.com

Cheers...

-Michael Steele
--
 System Engineer / Security Support Technician
 mailto:michaels () winsnort com
 Website: http://www.winsnort.com
 Snort: Open Source Network IDS - http://www.snort.org


> -----Original Message-----
> From: snort-users-admin () lists sourceforge net [mailto:snort-users-
> admin () lists sourceforge net] On Behalf Of Mark.Schutzmann () Omron com
> Sent: Friday, October 31, 2003 9:08 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Spade/Spice and Snort?
>
> Is anyone using the Spade preprocessor plugin for Snort? If so, is it
> practical, educational or entertaining? Are you seeing any major
> performance hits? I see that it will use Snort's logging facilities, but
> do
> you have to configure ACID to dig the results from SQL? Thoughts please.
>
> Regards,
> Mark
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?   SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users







-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users